Skip to content
Skycloak
Use case

Customer portal authentication that your customers can manage themselves

Customer portal authentication is the sign-in in front of the portal where your customers view their account, their invoices, their data or their support tickets. It has to be easy enough for someone who visits twice a year and strong enough for an administrator who manages a whole company's access. The Skycloak Platform is built to cover both.

What customers expect from a portal sign-in

People expect to sign up on their own, reset a forgotten password without calling anyone, and stay signed in on the devices they use. Each of those is also a door for abuse: sign-up forms attract bots, reset flows attract account takeover, and long sessions on shared computers leak access.

The Platform hosts the sign-up, sign-in and recovery pages for your tenant and handles those cases in one place, so your portal does not carry its own copy of each flow. Passkeys and multi-factor authentication are on the plan, so a customer can choose a sign-in that is both quicker and harder to phish than a password.

Business customers and their administrators

When your customers are companies, the portal needs more than individual accounts. Organizations, roles per organization and enterprise SSO over SAML are on the Platform's plan: each customer becomes an organization with its own members, an administrator can invite colleagues and assign roles, and a larger customer can send its employees through its own identity provider.

Your portal reads the organization and the roles from the token it receives, so showing the right invoices to the right people is a check on one claim rather than a membership system your team has to build.

Your brand, your address, your region

Custom domains are on the plan, so the sign-in page can sit on an address under your own domain and match your portal, rather than sending customers to a page that looks like someone else's product.

Each tenant runs in the United States or in the European Union, fixed when you create it, so European customers' accounts can stay in the European Union. We describe a feature as available only once it has shipped, so a demo is where you see what you can use today.

Frequently asked questions

Can customers sign up on their own?

Yes. Self-service sign-up, sign-in and password recovery run on your tenant's hosted pages, and you decide whether sign-up is open or by invitation.

Will the sign-in page look like my portal?

That is the intent. Branding for the sign-in pages and custom domains are both on the plan, so the pages can match your portal and sit under your own address.

See the Skycloak Platform for yourself

Book a demo and we will walk you through the Platform with your own sign-in flows in mind.